General
-
Target
JaffaCakes118_0b3df9add8d167a1916b79f434e148df
-
Size
679KB
-
Sample
250122-hgxyxstngr
-
MD5
0b3df9add8d167a1916b79f434e148df
-
SHA1
ce8fc58b195f40215c5592a94a9238d8e55a6acf
-
SHA256
dbfc2b7e412b207ad508ef0e144f6ccb0982dc3fc6a1a43dc604fe502bd35022
-
SHA512
63b71a83e321c7105e7ceef18ea5cfa793c1d6f43ea6aa2ceb69d2f09fa3d5984c7982fe9dbb714031a82ca869bf4e532cdf2039117f0777be657df1146f9d27
-
SSDEEP
12288:FTbNUdZURigKJwg4/Ft46nuQO0lPFJgyS/FJyiTS5:tbmURi5Sg4D4jQ3PFJ4LyiTS5
Behavioral task
behavioral1
Sample
JaffaCakes118_0b3df9add8d167a1916b79f434e148df.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
JaffaCakes118_0b3df9add8d167a1916b79f434e148df.exe
Resource
win10v2004-20241007-en
Malware Config
Targets
-
-
Target
JaffaCakes118_0b3df9add8d167a1916b79f434e148df
-
Size
679KB
-
MD5
0b3df9add8d167a1916b79f434e148df
-
SHA1
ce8fc58b195f40215c5592a94a9238d8e55a6acf
-
SHA256
dbfc2b7e412b207ad508ef0e144f6ccb0982dc3fc6a1a43dc604fe502bd35022
-
SHA512
63b71a83e321c7105e7ceef18ea5cfa793c1d6f43ea6aa2ceb69d2f09fa3d5984c7982fe9dbb714031a82ca869bf4e532cdf2039117f0777be657df1146f9d27
-
SSDEEP
12288:FTbNUdZURigKJwg4/Ft46nuQO0lPFJgyS/FJyiTS5:tbmURi5Sg4D4jQ3PFJ4LyiTS5
Score10/10-
ModiLoader, DBatLoader
ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
-
Modiloader family
-
ModiLoader Second Stage
-
Suspicious use of SetThreadContext
-